SolarWinds Vulnerability Impact Inquiry

[michelleb15714938]

RE: SolarWinds Vulnerability Impact Inquiry

You may or may not be aware that a major security breach of a prominent sofware company, SolarWinds, occurred within the past few weeks.  In the vein of due diligence for vendor security efforts, can I inquire whether Adobe Creative Cloud and/or any related services may have been impacted.

1. Are any SolarWinds products installed on servers and/or endpoints in your Adobe Creative Cloud environment?
2. Does Adobe user SolarWinds Orion platform in its environment or the services you provide related to Adobe Creative Cloud?
3. Have you performed due diligence to determine whether your organization or the services you provide have been impacted by the SolarWinds Security Advisory?
4. If your organization has been impacted, what mitigation steps and remediation timelines have been put in place?

[John T Smith]

This is a public forum, not Adobe support

Adobe, 345 Park Avenue, San Jose, CA 95110-2704 USA Tel: 408-536-6000 Fax: 408-537-6000

[Nancy OShea]

The hack happened almost 12 months ago.  And the main focus of the attack was government agencies that use SolarWinds IT management systems.  Are you a gov't agency?  Does your IT dept use SolarWinds systems?

https://whatis.techtarget.com/feature/SolarWinds-hack-explained-Everything-you-need-to-know

If you're a Teams/Enterprise plan holder you should be talking to your IT dept in consultation with your Team/Enterprise plan rep at Adobe.

Adobe rarely discuss matters like this in a public user forum. If & when there is anything official to say, they usually  release a statement on their website and notify their customers directly.